Module Values.VulnerabilitySource

A vulnerability associated with a finding.

Sourcetype nonrec t = {
  1. id : NonEmptyString.t;
    (*

    The identifier of the vulnerability.

    *)
  2. vulnerablePackages : SoftwarePackageList.t option;
    (*

    List of software packages that have the vulnerability.

    *)
  3. cvss : CvssList.t option;
    (*

    CVSS scores from the advisory related to the vulnerability.

    *)
  4. relatedVulnerabilities : StringList.t option;
    (*

    List of vulnerabilities that are related to this vulnerability.

    *)
  5. vendor : VulnerabilityVendor.t option;
    (*

    Information about the vendor that generates the vulnerability report.

    *)
  6. referenceUrls : StringList.t option;
    (*

    A list of URLs that provide additional information about the vulnerability.

    *)
  7. fixAvailable : VulnerabilityFixAvailable.t option;
    (*

    Specifies if all vulnerable packages in a finding have a value for FixedInVersion and Remediation. This field is evaluated for each vulnerability Id based on the number of vulnerable packages that have a value for both FixedInVersion and Remediation. Valid values are as follows: YES if all vulnerable packages have a value for both FixedInVersion and Remediation NO if no vulnerable packages have a value for FixedInVersion and Remediation PARTIAL otherwise

    *)
  8. epssScore : Double.t option;
    (*

    The Exploit Prediction Scoring System (EPSS) score for a finding.

    *)
  9. exploitAvailable : VulnerabilityExploitAvailable.t option;
    (*

    Whether an exploit is available for a finding.

    *)
  10. lastKnownExploitAt : NonEmptyString.t option;
    (*

    The date and time of the last exploit associated with a finding discovered in your environment.

    *)
  11. codeVulnerabilities : VulnerabilityCodeVulnerabilitiesList.t option;
    (*

    The vulnerabilities found in your Lambda function code. This field pertains to findings that Security Hub CSPM receives from Amazon Inspector.

    *)
}
Sourceval context_ : string
Sourceval make : ?vulnerablePackages:??? -> ?cvss:??? -> ?relatedVulnerabilities:??? -> ?vendor:??? -> ?referenceUrls:??? -> ?fixAvailable:??? -> ?epssScore:??? -> ?exploitAvailable:??? -> ?lastKnownExploitAt:??? -> ?codeVulnerabilities:??? -> id:NonEmptyString.t -> unit -> t
Sourceval to_value : t -> [> `Structure of (string * [> `Double of Double.t | `Enum of string | `List of [> `String of NonEmptyString.t | `Structure of (string * [> `Double of Double.t | `List of [> `String of NonEmptyString.t | `Structure of (string * [> `String of NonEmptyString.t ]) list ] list | `String of NonEmptyString.t | `Structure of (string * [> `Integer of Integer.t | `String of NonEmptyString.t ]) list ]) list ] list | `String of NonEmptyString.t | `Structure of (string * [> `String of NonEmptyString.t ]) list ]) list ]
Sourceval to_query : t -> Awso.Client.Query.t
Sourceval of_xml : Awso.Xml.t -> t
Sourceval of_string : string -> t
Sourceval of_json : Yojson.Safe.t -> t
Sourceval to_json : t -> Yojson.Safe.t